Privacy policy

1.1. This Privacy Policy explains how we collect, use and disclose personal data when you visit plashe.com (the "Website"), place an order, create an account, subscribe to our emails, contact us or otherwise share personal data with us. It applies to every visitor and customer of the Website.

1.2. "Personal data" means any information that identifies you directly or indirectly, such as your name, email address or IP address.

1.3. Please read this policy to understand what data we process, where it comes from, why we use it and what rights you have.

2.1. The Website is operated by PLASHE, a company registered in Albania with its registered office at Rruga Kongresi i Lushnjes, Z.K 8220, Nr. P4/532-N1, Tirana, Albania ("PLASHE", "we", "us"). We are the controller of your personal data, which means we decide why and how it is processed.

2.2. Our operations and customer support team is based in Latvia.

2.3. Our representative in the European Union under Article 27 GDPR is Matteo Curreti, matteo@plashe.com. You may contact him on any matter related to the processing of your personal data.

2.4. For any privacy question or request, email hello@plashe.com.

3.1. Directly from you, when you place an order, create an account, subscribe to our newsletter, leave a product review, or contact us by email or social media.

3.2. Automatically, when you browse the Website, through cookies and similar technologies (see section 6).

For each purpose below, we list the data involved, the legal basis, how long we keep it and who receives it.

You can opt out at any time by clicking "unsubscribe" in any of our emails or by writing to hello@plashe.com.

4.9. We may also use data in anonymised, aggregated form that cannot identify you, for statistics and product improvement.

4.10. We do not collect special categories of data, such as health, religious or political information, and we do not knowingly collect data from children under 16. Please do not send us such data.

5.1. After a purchase, we may email you to ask for a review. We process your first name, email, order details, review text, rating, photos and submission date.

5.2. We ask for your review on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and publish it with your consent (Art. 6(1)(a) GDPR). Published reviews show your first name and verified buyer status.

5.3. We keep reviews while the product is sold, plus 1 year. You can withdraw your consent and ask us to remove your review at any time by emailing hello@plashe.com. Withdrawal does not affect processing done before it.

6.1. Cookies are small text files stored by your browser. Strictly necessary cookies keep the store working, such as your cart, checkout, currency and security, and do not need consent.

6.2. Analytics and advertising cookies and pixels, including Google Analytics and the Meta Pixel, are only set if you accept them in our cookie banner. They help us understand how the Website is used and measure how our ads perform.

6.3. You can change your choice at any time through the "Your Privacy Choices" link in the footer or in your browser settings.

7.1. If you accept advertising cookies, you may see PLASHE ads on social media and other websites based on your activity on our Website.

7.2. If you subscribe to our emails, we may group subscribers by interests and past purchases so that our messages are relevant, for example by not resending an email you have already opened. This does not produce legal or similarly significant effects for you.

7.3. To stop personalised ads, decline or delete advertising cookies. To stop personalised emails, unsubscribe.

8.1. We never sell your personal data. We share it only on a lawful basis and only for the purposes in this policy.

8.2. We use service providers (data processors) that act only on our instructions, under contracts that require them to protect your data:

8.3. We may also disclose data to our legal, tax and accounting advisers; to a buyer or adviser if our business is sold or restructured; and to authorities, courts or law enforcement where the law requires it or to protect our legal rights.

9.1. PLASHE is registered in Albania, and some providers, such as Shopify, Klaviyo, Google and Meta, may process data in the United States or other countries outside the European Economic Area. Orders to the USA or Australia are printed there, so the order details are sent to our production and shipping services in those countries.

9.2. For these transfers, we rely on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses.

10.1. We use encrypted connections (HTTPS), strict access controls, multi-factor authentication on our admin accounts, certified payment processing and regular security reviews.

10.2. No online system is completely secure. If a personal data breach is likely to put your rights and freedoms at high risk, we will inform you without undue delay.

We keep personal data only as long as the purpose requires, or longer where the law requires it. The retention period for each purpose is listed in sections 4 and 5.

12.1. Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data deleted when it is no longer needed or is processed unlawfully;
• restrict processing while a dispute or check is ongoing;
• receive your data in a readable format or have it transferred to another controller;
• object to processing based on legitimate interest, and to direct marketing at any time;
• withdraw your consent at any time, without affecting earlier processing;
• ask for human review of any decision made about you only by automated means.

12.2. To use your rights, email hello@plashe.com. We may ask you to confirm your identity.

12.3. We reply within one month of receiving your request. For complex or numerous requests, this can be extended by two further months, and we will tell you why within the first month. If we cannot meet a request, we will explain the legal reason.

13.1. If you are unhappy with how we handle your data, please write to us first and we will try to resolve it quickly.

13.2. You can also complain to the Albanian Information and Data Protection Commissioner (idp.al), or to the data protection authority in the EU or EEA country where you live or work (list of EU authorities).

We may update this Privacy Policy when our services or the law change. The date at the top shows the current version. For significant changes, we will also notify you by email or on the Website.

PLASHE
Registered office: Rruga Kongresi i Lushnjes, Z.K 8220, Nr. P4/532-N1, Tirana, Albania
EU representative: Matteo Curreti, matteo@plashe.com
Email: hello@plashe.com